HP VPN Firewall Appliances Network Management Configuration Guide

661
Figure 354 Network diagram
Table 71 Interface and IP address assignment
Device Interface IP address
Device Interface IP address
Source 1 - 192.168.1.100/24 Firewall GE0/1 10.110.5.1/24
Source 2 - 192.168.3.100/24 Firewall GE0/2 10.110.3.2/24
Router A Eth1/1 10.110.1.1/24 Firewall Loop0 2.2.2.2/32
Router A Eth1/2 10.110.2.1/24 Router D Eth1/1 10.110.5.2/24
Router A Loop0 1.1.1.1/32 Router D Eth1/2 192.168.3.1/24
Router B Eth1/1 10.110.1.2/24 Router E Eth1/1 10.110.6.1/24
Router B Eth1/2 192.168.1.1/24 Router E S2/0 10.110.4.2/24
Router B Eth1/3 10.110.3.1/24 Router F Eth1/1 10.110.6.2/24
Router C Eth1/1 10.110.2.2/24 Router F Eth1/2 192.168.4.1/24
Router C Eth1/2 192.168.2.1/24 Router F Loop0 3.3.3.3/32
Router C S2/0 10.110.4.1/24
Configuration procedure
1. Assign IP addresses and configure unicast routing:
a. Assign an IP address and subnet mask to each interface according to Figure 354. (Details not
shown.)
b. Configure OSPF on the routers to make sure the routers are interoperable at the network layer
in eac
h AS, and they can dynamically update routing information. (Details not shown.)
2. Enable IP multicast routing, PIM-SM, and IGMP, and configure a PIM-SM domain border:
Eth1/3
S
2
/
0
Router B
Router A
Source 1
AS 100
PIM-SM 1
PIM-SM 3
PIM-SM 2
Loop0
Firewall Router D
Router E
Router F
Source 2
Eth1/2
Eth1/1
GE0/2 GE0/1
Eth1/1
Loop0
Receiver
Receiver
Loop0
BGP peers
Eth1
/1
Eth1/1
Eth1/1
Eth1/2
Eth1
/2
AS 200
S
2
/
0
Eth1/1
Eth1/2
Eth1/2
Router C